updated require login redirect